Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 01:55:07.770 00:05:04.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:55:07.768 00:05:04.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:59:16.822 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:32924 10 6452 1 2025-12-05 01:59:28.875 00:00:10.362 TCP 23.104.0.1:56466 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:00:17.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46918 10 6452 1 2025-12-05 02:00:29.278 00:00:10.372 TCP 23.104.0.1:55964 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:01:17.253 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-12-05 02:01:29.691 00:00:10.367 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:02:19.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:02:19.048 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:02:17.468 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40436 10 6452 1 2025-12-05 02:02:30.115 00:00:10.363 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:03:17.692 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6452 1 2025-12-05 02:03:30.518 00:00:10.325 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:04:17.897 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48984 10 6452 1 2025-12-05 02:04:30.881 00:00:10.383 TCP 23.104.0.1:35690 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:01:07.772 00:05:04.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:01:07.770 00:05:04.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:05:18.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-12-05 02:05:31.302 00:00:10.321 TCP 23.104.0.1:47384 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:06:18.295 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-12-05 02:06:31.666 00:00:10.375 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:07:19.431 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:07:19.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:07:18.509 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-12-05 02:07:32.106 00:00:10.380 TCP 23.104.0.1:49760 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:08:18.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53676 10 6452 1 2025-12-05 02:08:32.528 00:00:10.365 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:09:18.946 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53282 10 6452 1 2025-12-05 02:09:32.925 00:00:10.352 TCP 23.104.0.1:32900 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:10:19.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55692 10 6452 1 2025-12-05 02:10:33.317 00:00:10.323 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:07:07.771 00:05:04.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:07:07.774 00:05:04.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:11:19.401 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-12-05 02:11:33.678 00:00:10.365 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:12:19.613 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:12:19.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:12:19.612 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34118 10 6452 1 2025-12-05 02:12:34.104 00:00:10.365 TCP 23.104.0.1:44164 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:13:19.828 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54210 10 6452 1 2025-12-05 02:13:34.505 00:00:10.361 TCP 23.104.0.1:57230 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:14:20.068 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45396 10 6452 1 2025-12-05 02:14:34.911 00:00:10.319 TCP 23.104.0.1:56740 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:15:20.272 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-12-05 02:15:35.271 00:00:10.371 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:16:20.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33468 10 6452 1 2025-12-05 02:16:35.680 00:00:10.362 TCP 23.104.0.1:57180 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:13:07.776 00:05:04.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:13:07.774 00:05:04.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:17:19.846 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:17:19.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:17:20.702 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41590 10 6452 1 2025-12-05 02:17:36.108 00:00:10.364 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:18:20.873 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59878 10 6452 1 2025-12-05 02:18:36.509 00:00:10.363 TCP 23.104.0.1:46996 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:19:21.109 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6452 1 2025-12-05 02:19:36.912 00:00:10.363 TCP 23.104.0.1:57988 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:20:21.320 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47580 10 6452 1 2025-12-05 02:20:37.310 00:00:10.324 TCP 23.104.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:21:21.532 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:53014 10 6452 1 2025-12-05 02:21:37.676 00:00:15.900 TCP 23.104.0.1:39456 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:22:19.745 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:22:20.234 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:22:21.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-12-05 02:22:43.653 00:00:10.364 TCP 23.104.0.1:38968 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:19:07.779 00:05:04.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:19:07.777 00:05:04.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:23:22.187 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36234 10 6452 1 2025-12-05 02:23:44.071 00:00:10.369 TCP 23.104.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:24:22.414 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34030 10 6452 1 2025-12-05 02:24:44.480 00:00:16.008 TCP 23.104.0.1:34606 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:25:22.638 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54954 10 6452 1 2025-12-05 02:25:50.527 00:00:10.319 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:26:22.849 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-12-05 02:26:50.884 00:00:10.772 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:27:19.673 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:27:19.716 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:27:23.075 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53244 10 6452 1 2025-12-05 02:27:51.693 00:00:10.362 TCP 23.104.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:28:23.244 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-12-05 02:28:52.108 00:00:10.704 TCP 23.104.0.1:59690 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:25:07.780 00:05:04.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:25:07.779 00:05:04.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:29:23.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52412 10 6452 1 2025-12-05 02:29:52.849 00:00:10.333 TCP 23.104.0.1:48058 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:30:23.665 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6452 1 2025-12-05 02:30:53.222 00:00:10.372 TCP 23.104.0.1:35156 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:31:23.877 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-12-05 02:31:53.631 00:00:10.361 TCP 23.104.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:32:19.617 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:32:19.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:32:24.098 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-12-05 02:32:54.030 00:00:10.365 TCP 23.104.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:33:24.311 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40152 10 6452 1 2025-12-05 02:33:54.437 00:00:11.049 TCP 23.104.0.1:35316 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:34:24.534 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 10 6452 1 2025-12-05 02:34:55.526 00:00:10.363 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:31:07.783 00:05:04.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:31:07.780 00:05:04.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:35:24.766 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-12-05 02:35:55.928 00:00:10.384 TCP 23.104.0.1:41472 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:36:24.975 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34210 10 6452 1 2025-12-05 02:36:56.351 00:00:10.324 TCP 23.104.0.1:37560 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:37:19.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:37:19.898 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:37:25.208 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50684 10 6452 1 2025-12-05 02:37:56.714 00:00:10.373 TCP 23.104.0.1:49342 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:38:25.420 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52508 10 6452 1 2025-12-05 02:38:57.123 00:00:10.367 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:39:25.631 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45774 10 6452 1 2025-12-05 02:39:57.530 00:00:10.327 TCP 23.104.0.1:57426 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:40:25.838 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-12-05 02:40:57.892 00:00:10.379 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:37:07.783 00:05:04.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:37:07.785 00:05:04.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:41:26.077 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39856 10 6452 1 2025-12-05 02:41:58.308 00:00:10.381 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:42:20.182 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:42:20.170 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:42:26.285 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59262 10 6452 1 2025-12-05 02:42:58.731 00:00:10.363 TCP 23.104.0.1:57432 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:43:26.499 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39566 10 6452 1 2025-12-05 02:43:59.131 00:00:10.365 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:44:26.725 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-12-05 02:44:59.534 00:00:10.328 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:45:26.945 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:36738 10 6452 1 2025-12-05 02:45:59.904 00:00:10.364 TCP 23.104.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:46:27.135 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-12-05 02:47:00.304 00:00:10.363 TCP 23.104.0.1:59236 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:43:07.785 00:05:04.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:47:20.034 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:43:07.787 00:05:04.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:47:20.229 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:47:27.356 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34460 10 6452 1 2025-12-05 02:48:00.705 00:00:10.361 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:48:27.568 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57032 10 6452 1 2025-12-05 02:49:01.121 00:00:10.364 TCP 23.104.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:49:27.742 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57888 10 6452 1 2025-12-05 02:50:01.526 00:00:10.364 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:50:27.966 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53320 12 6556 1 2025-12-05 02:51:01.934 00:00:10.375 TCP 23.104.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:51:28.191 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6452 1 2025-12-05 02:52:02.347 00:00:10.368 TCP 23.104.0.1:60110 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:52:20.032 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:52:20.380 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:52:28.405 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2025-12-05 02:49:07.786 00:05:04.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:53:02.752 00:00:10.378 TCP 23.104.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:49:07.789 00:05:04.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:53:28.622 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45456 10 6452 1 2025-12-05 02:54:03.169 00:00:10.327 TCP 23.104.0.1:48526 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:54:28.833 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-12-05 02:55:03.535 00:00:10.369 TCP 23.104.0.1:42446 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:55:29.077 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-12-05 02:56:03.944 00:00:10.366 TCP 23.104.0.1:59132 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:56:29.245 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33758 10 6452 1 2025-12-05 02:57:04.351 00:00:10.361 TCP 23.104.0.1:45232 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:57:20.560 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 02:57:20.539 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 02:57:29.453 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32982 10 6452 1 2025-12-05 02:58:04.755 00:00:10.384 TCP 23.104.0.1:55958 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:58:29.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1042, avg pps: 0, avg bpp: 317 Time window: 2025-12-05 01:55:07 - 2025-12-05 02:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0021s Wall: 0.0024s flows/second: 69183.5 Runtime: 0.0024s